Study. uk . com
  1. Home
  2. All questions
  3. Question 426

CISSP study material · question 426 of 500

A patch causes an application to fail in production. Which three remedies does NIST SP 800-40 Rev. 4 name? Choose three.

  1. Revert to the previous version of the software.
  2. Disable the affected security control until a fix is available.
  3. Uninstall the patch.
  4. Restore the software or the asset from backups.
Show the answer

Answer: D. Restore the software or the asset from backups.
C. Uninstall the patch.
A. Revert to the previous version of the software.

SP 800-40 says operational issues from a patch may necessitate uninstalling it, reverting to the previous version of the software, or restoring the software or asset from backups.

Source: NIST SP 800-40 Rev. 4 (NIST) — SP 800-40 Rev. 4 > 2.3.2 Deploy the Patch

Challenge yourself on this topic → Study as cards